GPO about Remote control RRS feed

  • 问题

  • There is a domain environment, and have more than 1000 users in it. When creating a new user, it has local admin permission as default. So all users are in local admin group.

    But now, we have to disable all computers' remote permission except some sepcial user should have remote permission.

    I know there is a gpo related remote settings, but it need user only is domain user, not local admin. when the user is local admin, it can add himself into remote control user group to assign permission.

    So now, my question is how to set this gpo in the domain and did not remove all user from local admin group. we should met the below requirment:

    1, all computers should be disabled remote control. it means right click My computer, choose perporties, click remote tab, the checkbox should be gray before allow user remote this computer and the button named choose remote user should be gray too.

    2, Allow domain admin add user into remote control user group to give remote permission for special user, which need remote computer.

    please feel free let me know the detail setting steps for me about this status.

    it is urgent.

    thanks a lot


    2010年12月12日 2:38


  • Dear Customer,


    Based on my research, please refer to the following article:


    Enable or disable Remote Desktop

    Hope the above information helps. If you have any further questions or concerns, please feel free to let me know. I am happy to be of assistance.


    Thank you for your time.


    Tom Zhang

    Tom Zhang – MSFT
    2010年12月17日 9:22